HSPD-12 Engineer

A3 Technology, Inc.•Washington, DC

9d•$50,000 - $175,000

About The Position

A3 Technology, Inc. is seeking an HSPD-12 Engineer to serve as a subject-matter expert in credential management systems with a primary focus on HSPD-12 Technologies, including Intercede MyID and PKI. This role provides advanced engineering, troubleshooting, and cloud-support services while collaborating with development, security, and infrastructure teams to design and maintain secure, scalable, automated solutions.

Requirements

Minimum of FIVE (5) years of relevant IT or engineering experience, including at least 1–2 years of cloud support experience.
Hands-on experience working with credential management systems including Intercede MyID, HID solutions, PKI infrastructures, and certificate lifecycle management platforms.
Proven experience troubleshooting drivers, middleware, credentialing software, and authentication technologies.
Experience supporting and engineering Windows environments, as well as performing DBA responsibilities for Intercede or similar systems.
Ability to obtain and maintain a Federal or DoD Public Trust clearance; candidates must receive adjudication prior to onboarding.
US Citizenship or documented proof of eligibility to work in the US is a must.
Candidates must be either a US citizen or a current green card holder with the last 3 consecutive years as a resident of the US.

Nice To Haves

Master’s degree may substitute for four years of experience.
Experience with DevSecOps and Cloud software deployments.
Candidates with an active Public Trust or Suitability determination are preferred.

Responsibilities

Provide engineering, operational, and lifecycle support for HSPD-12 and PIV credentialing environments in alignment with FICAM, NIST, FISMA, and agency policy requirements.
Engineer, maintain, and enhance credential management platforms including Intercede MyID, HID credentialing technologies, supporting middleware, smart card components, and Windows Server/database infrastructure.
Manage core PIV/PKI infrastructure including Hardware Security Modules (HSMs), Certificate Authorities (CAs), Registration Authorities (RAs), certificate profiles, key management systems, and OCSP/CRL services.
Oversee secure configuration, patching, firmware updates, backups, monitoring, and lifecycle management for HSMs and PKI systems supporting certificate issuance and PIV key generation.
Support cloud-hosted PIV/PKI services in AWS and Azure, including virtualized CAs, credentialing applications, and HSM-integrated workloads.
Use Terraform, Ansible, and automation frameworks to provision, configure, and maintain secure, compliant cloud and hybrid environments hosting PIV and certificate services.
Implement policy-as-code, configuration baselines, and automated deployments to ensure consistent enforcement of HSPD-12, NIST, and FICAM requirements.
Automate deployment and maintenance of PIV credentialing applications, PKI services, middleware, and supporting components to ensure reliable and secure operations.
Implement monitoring and alerting for critical PIV/PKI functions including certificate operations, HSM health, OCSP/CRL endpoints, issuance errors, and authentication performance.
Troubleshoot complex issues across the credentialing ecosystem—including authentication devices, drivers, middleware, certificate chains, cryptographic services, and trust store configurations—across cloud and on-prem environments.
Support full credential lifecycle operations including issuance, activation, suspension, revocation, renewal, auditing, and compliance documentation.
Maintain operational baselines, perform root cause analysis of recurring PIV/PKI issues, and implement durable remediation to strengthen system reliability.
Ensure high availability, redundancy, and disaster recovery readiness across PIV and PKI infrastructure through resilient engineering and operational best practices.
Apply and enforce security best practices across cloud, on-prem, and credentialing systems to protect sensitive key material and maintain continuous compliance.
Participate in audits, assessments, and accreditation activities to support continuous authorization for PIV and PKI systems.
Work independently or as part of a cross-functional team to support mission-critical environments.